Avast WEBforum

Consumer Products => Avast Free Antivirus / Premium Security (legacy Pro Antivirus, Internet Security, Premier) => Topic started by: Elle8 on May 28, 2011, 05:58:28 PM

Title: Blue screen of death: aswSP.sys
Post by: Elle8 on May 28, 2011, 05:58:28 PM
Hello there

avast was recommended to me by quite a few techies. However, since I installed it two months ago, my laptop, a Dell Inspiron 1525 which runs on Vista, has been blue screening.

Event manager has given the following error messages:
The computer has rebooted from a bugcheck.  The bugcheck was: 0x0000008e (0xc0000005, 0x005a0053, 0x949dac50, 0x00000000). A dump was saved in: C:\Windows\MEMORY.DMP.

The computer has rebooted from a bugcheck.  The bugcheck was: 0x000000d1 (0x0032003b, 0x00000002, 0x00000001, 0x8d3721b9). A dump was saved in: C:\Windows\MEMORY.DMP.

The computer has rebooted from a bugcheck.  The bugcheck was: 0x000000d1 (0x00000015, 0x00000002, 0x00000001, 0x8d7521b9). A dump was saved in: C:\Windows\MEMORY.DMP.

I've also noticed messages about:
driver irql not less or equal
fault page in nonpaged area
aswSP.sys

I've asked on various techie forums for help and they said aswSP.sys is an avast driver.

I am using the free version and it's 110528-1.

Please can you give me some advice. Also, I’m not very tech savvy, so please explain as if speaking to a child!!

If you need any more info, please let me know.
Thank you.

Title: Re: Blue screen of death: aswSP.sys
Post by: DavidR on May 28, 2011, 06:04:24 PM
The aswSP.sys is the avast self protection driver.

- Upload any minidump or memory.dmp files (only the latest memory.dmp file), zipped to reduce size.  Give the zip file you are uploading a unique name (e.g. m0unds-mem-dump.zip, etc), so they can identify it. It might not be a bad idea to create a text file (readme.txt) with any relevant information, avast topic, user name, etc. etc. in the zip file.

Upload the zip file to the ftp server ftp://ftp.avast.com/incoming (ftp://ftp.avast.com/incoming):
- Using Internet Explorer, Connect to the link and drag the file into the Right pane and drop it, that starts the upload, you don't have read access to this folder.

Or

- Upload it using the Run command-line in Windows: Windows Key + R (to get the run box), copy and paste this
Code: [Select]
explorer ftp://ftp.avast.com/incoming and drag the file into the window, from another explorer window.

####
Have (or did) you another Anti-Virus installed in this system, if so what was it and how did you get rid of it ?
Title: Re: Blue screen of death: aswSP.sys
Post by: Elle8 on May 28, 2011, 06:46:54 PM
Thanks for your quick response David. It's just this minute BSOD again :-[.

The anti-virus I used to use was Anti-Vir and AVG ver8.5. I removed AVG using AVG removal tool, then checked with Appremover to confirm it had been removed. Avira AntiVir I removed with Appremover.

I will attempt to follow your other instructions.

Thank you.
Title: Re: Blue screen of death: aswSP.sys
Post by: Elle8 on May 28, 2011, 06:55:51 PM
Hello again

How do I create a readme text and zip it with the file please?

Thanks.
Title: Re: Blue screen of death: aswSP.sys
Post by: DavidR on May 28, 2011, 06:59:20 PM
You're welcome.

Check this out for avira removal - Avira AntiVir Uninstall Package & RegistryCleaner (choose appropriate version): http://www.avira.com/en/support/support_downloads.html (http://www.avira.com/en/support/support_downloads.html), Avira RegistryCleaner. http://www.avira.com/en/support-download-avira-registrycleaner (http://www.avira.com/en/support-download-avira-registrycleaner)
Title: Re: Blue screen of death: aswSP.sys
Post by: DavidR on May 28, 2011, 07:05:11 PM
Hello again

How do I create a readme text and zip it with the file please?

Thanks.

If you have notepad, you use that to use as a text editor and enter the suggested information. When you have done that, just save it and give it the name ReadMe.txt done.

You need to have a zip (archiving program), if you have got one then some will allow you to open the archive and either select add or drag and drop the readme.txt file into the zip archive.

If you haven't got one, I use 7zip, which is fairly easy to use, www.7-zip.org, it is a free application.
Title: Re: Blue screen of death: aswSP.sys
Post by: Elle8 on May 28, 2011, 07:16:49 PM
Wow. Thanks for the quick response again DavidR.

I've just uploaded the zip file. I called it Elle8 m0unds-mem-dump.zip and I think the readme.txt dragged into it fine.

I've done the Anti-Vir registry cleaner and there were some items left. I deleted most of them, but five items failed to delete:
H_KEY_LOCAL\MACHINE\SYSTEM\CONTROLSET001\SERVICES\avast! ANTIVIR
H_KEY_LOCAL\MACHINE\SYSTEM\CONTROLSET002\SERVICES\avast! ANTIVIR
H_KEY_LOCAL\MACHINE\SYSTEM\CONTROLSET003\SERVICES\avast! ANTIVIR
H_KEY_LOCAL\MACHINE\SYSTEM\CONTROLSET004\SERVICES\avast! ANTIVIR
H_KEY_LOCAL\MACHINE\SYSTEM\Services\avast! ANTIVIR


Thanks.
Title: Re: Blue screen of death: aswSP.sys
Post by: DavidR on May 28, 2011, 07:30:19 PM
Well since those are avast antivir [us] the US bit being dropped off the end, all very confusing, but they are protected by the avast self-defence module and windows shouldn't allow them to be deleted since they are in use.
Title: Re: Blue screen of death: aswSP.sys
Post by: Elle8 on May 28, 2011, 07:33:54 PM
How strange that they are in use. I have not used AntiVir for months.
Title: Re: Blue screen of death: aswSP.sys
Post by: DavidR on May 28, 2011, 07:42:38 PM
They aren't avira but avast! antivirus, reread my last post and below, bold to show they are avast! registry keys and not avira.

H_KEY_LOCAL\MACHINE\SYSTEM\CONTROLSET001\SERVICES\avast! ANTIVIR
Title: Re: Blue screen of death: aswSP.sys
Post by: Elle8 on May 28, 2011, 07:45:48 PM
Ah sorry... should have gone to Specsavers.
That is odd then! I am confused!
Title: Re: Blue screen of death: aswSP.sys
Post by: DavidR on May 28, 2011, 08:59:19 PM
Nothing odd, just an unfortunate coincidence that the full registry key has been concatenated dropping the most important part the last two digits US so it looks like ANTIVIR (the alternate name of avira) and not ANTIVIRUS.
Title: Re: Blue screen of death: aswSP.sys
Post by: Elle8 on May 29, 2011, 04:11:34 PM
Ah I see.

Re my FTP upload, how will I know if I've uploaded it correctly and if it's been read please?

Thanks.
Title: Re: Blue screen of death: aswSP.sys
Post by: DavidR on May 29, 2011, 04:19:05 PM
Unless you actually use an ftp program (rather than my suggested options), you won't know as you don't have read permission on the avast.com/incoming folder. With an ftp program, they usually report successful completion of the upload.

If they did receive it and you gave the link to the topic, generally they will get back to you in the topic.
Title: Re: Blue screen of death: aswSP.sys
Post by: Elle8 on May 29, 2011, 04:26:21 PM
Oh dear, I'm not sure I linked to the topic correctly, I've resent.

Thanks and sorry about that.
Title: Re: Blue screen of death: aswSP.sys
Post by: Elle8 on May 29, 2011, 04:48:33 PM
I've just done a HiJack this and uploaded it here too in case there's anything of interest.

Thanks:

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 15:47:47, on 29/05/2011
Platform: Windows Vista SP2 (WinNT 6.00.1906)
MSIE: Internet Explorer v8.00 (8.00.6001.19048)
Boot mode: Normal

Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\Dell\DellDock\DellDock.exe
C:\Program Files\DellTPad\Apoint.exe
C:\Windows\System32\igfxtray.exe
C:\Windows\System32\hkcmd.exe
C:\Windows\System32\igfxpers.exe
C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe
C:\Windows\System32\WLTRAY.EXE
C:\Windows\system32\igfxsrvc.exe
C:\Program Files\Dell\MediaDirect\PCMService.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\Program Files\AVAST Software\Avast\AvastUI.exe
C:\Program Files\Siber Systems\AI RoboForm\robotaskbaricon.exe
C:\Program Files\Digital Line Detect\DLG.exe
C:\Windows\system32\taskeng.exe
C:\Program Files\DellTPad\Apntex.exe
C:\Program Files\DellTPad\HidFind.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Windows\system32\Macromed\Flash\FlashUtil10q_ActiveX.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Windows\system32\wuauclt.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Common Files\Adobe\Updater5\AdobeUpdater.exe
C:\Program Files\Trend Micro\HiJackThis\HiJackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.google.co.uk/ig/dell?hl=en&client=dell-usuk&channel=uk&ibd=5080820
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://forums.moneysavingexpert.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.google.co.uk/ig/dell?hl=en&client=dell-usuk&channel=uk&ibd=5080820
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Internet Explorer provided by Dell
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O1 - Hosts: ::1 localhost
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: RoboForm BHO - {724d43a9-0d85-11d4-9908-00400523e39a} - C:\Program Files\Siber Systems\AI RoboForm\roboform.dll
O2 - BHO: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O2 - BHO: WOT Helper - {C920E44A-7F78-4E64-BDD7-A57026E7FEB7} - C:\Program Files\WOT\WOT.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: SimpleAdblock Class - {FFCB3198-32F3-4E8B-9539-4324694ED664} - C:\Program Files\Common Files\Simple Adblock\SimpleAdblock.dll
O3 - Toolbar: WOT - {71576546-354D-41c9-AAE8-31F2EC22BF0D} - C:\Program Files\WOT\WOT.dll
O3 - Toolbar: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O3 - Toolbar: &RoboForm - {724d43a0-0d85-11d4-9908-00400523e39a} - C:\Program Files\Siber Systems\AI RoboForm\roboform.dll
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: [Apoint] C:\Program Files\DellTPad\Apoint.exe
O4 - HKLM\..\Run: [IgfxTray] C:\Windows\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\Windows\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] C:\Windows\system32\igfxpers.exe
O4 - HKLM\..\Run: [IAAnotif] "C:\Program Files\Intel\Intel Matrix Storage Manager\Iaanotif.exe"
O4 - HKLM\..\Run: [Broadcom Wireless Manager UI] C:\Windows\system32\WLTRAY.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [PCMService] "C:\Program Files\Dell\MediaDirect\PCMService.exe"
O4 - HKLM\..\Run: [GSISETUP] E:\setup.exe
O4 - HKLM\..\Run: [LXCFCATS] rundll32 C:\Windows\system32\spool\DRIVERS\W32X86\3\LXCFtime.dll,RunDLLEntry
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [avast] "C:\Program Files\AVAST Software\Avast\avastUI.exe" /nogui
O4 - HKCU\..\Run: [RoboForm] "C:\Program Files\Siber Systems\AI RoboForm\RoboTaskBarIcon.exe"
O4 - .DEFAULT User Startup: Dell Dock First Run.lnk = C:\Program Files\Dell\DellDock\DellDock.exe (User 'Default user')
O4 - Startup: Dell Dock.lnk = C:\Program Files\Dell\DellDock\DellDock.exe
O4 - Global Startup: Digital Line Detect.lnk = C:\Program Files\Digital Line Detect\DLG.exe
O8 - Extra context menu item: Customize Menu - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComCustomizeIEMenu.html
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Fill Forms - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComFillForms.html
O8 - Extra context menu item: Google Sidewiki... - res://C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_D183CA64F05FDD98.dll/cmsidewiki.html
O8 - Extra context menu item: RoboForm Toolbar - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComShowToolbar.html
O8 - Extra context menu item: Save Forms - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComSavePass.html
O9 - Extra button: Fill Forms - {320AF880-6646-11D3-ABEE-C5DBF3571F46} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComFillForms.html
O9 - Extra 'Tools' menuitem: Fill Forms - {320AF880-6646-11D3-ABEE-C5DBF3571F46} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComFillForms.html
O9 - Extra button: Save - {320AF880-6646-11D3-ABEE-C5DBF3571F49} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComSavePass.html
O9 - Extra 'Tools' menuitem: Save Forms - {320AF880-6646-11D3-ABEE-C5DBF3571F49} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComSavePass.html
O9 - Extra button: RoboForm - {724d43aa-0d85-11d4-9908-00400523e39a} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComShowToolbar.html
O9 - Extra 'Tools' menuitem: RoboForm Toolbar - {724d43aa-0d85-11d4-9908-00400523e39a} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComShowToolbar.html
O16 - DPF: {A7EA8AD2-287F-11D3-B120-006008C39542} (CBSTIEPrint Class) - http://offers.e-centives.com/cif/download/bin/actxcab.cab
O16 - DPF: {F27237D7-93C8-44C2-AC6E-D6057B9A918F} (JuniperSetupClientControl Class) - https://ssl01.berenberg.de/dana-cached/sc/JuniperSetupClient.cab
O18 - Protocol: wot - {C2A44D6B-CB9F-4663-88A6-DF2F26E4D952} - C:\Program Files\WOT\WOT.dll
O20 - AppInit_DLLs: AVGRSSTX.DLL
O20 - Winlogon Notify: GoToAssist - C:\Program Files\Citrix\GoToAssist\514\G2AWinLogon.dll
O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\Windows\system32\browseui.dll
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: Dock Login Service (DockLoginService) - Stardock Corporation - C:\Program Files\Dell\DellDock\DockLogin.exe
O23 - Service: GoToAssist - Citrix Online, a division of Citrix Systems, Inc. - C:\Program Files\Citrix\GoToAssist\514\g2aservice.exe
O23 - Service: Google Update Service (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Google Update Service (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Intel(R) Matrix Storage Event Monitor (IAANTMON) - Intel Corporation - C:\Program Files\Intel\Intel Matrix Storage Manager\Iaantmon.exe
O23 - Service: lxcf_device -   - C:\Windows\system32\lxcfcoms.exe
O23 - Service: SupportSoft Sprocket Service (dellsupportcenter) (sprtsvc_dellsupportcenter) - Unknown owner - C:\Program Files\Dell Support Center\bin\sprtsvc.exe (file missing)
O23 - Service: Dell Wireless WLAN Tray Service (wltrysvc) - Unknown owner - C:\Windows\System32\WLTRYSVC.EXE
O23 - Service: XAudioService - Conexant Systems, Inc. - C:\Windows\system32\DRIVERS\xaudio.exe

--
End of file - 8649 bytes
Title: Re: Blue screen of death: aswSP.sys
Post by: DavidR on May 29, 2011, 05:27:59 PM
No problem,

That's why I mentioned it in the initial instructions on readme.txt contents, or they are unlikely to know who it is from or how to respond. I will highlight that in future so it is clearer.
Title: Re: Blue screen of death: aswSP.sys
Post by: Elle8 on May 29, 2011, 06:22:40 PM
Thanks David.
Title: Re: Blue screen of death: aswSP.sys
Post by: DavidR on May 29, 2011, 07:00:25 PM
You're welcome.

I missed your HJT log last time round, but to be honest, it is a bit of a busted flush as it hasn't been updated in a very long time and malware has progressed into areas that it doesn't even look. A security application has to be up to date or it is worthless.

Didn't see anything obvious in it, but you appear to have remnants of AVG:
O20 - AppInit_DLLs: AVGRSSTX.DLL

This could be a contributory factor in a BSOD (conflict, etc.) so you could elect to fix this in HJT. Or run their removal tool.

- Ensure that all remnants of AVG are gone - AVG8.x (or higher) Remover, download tool from here, http://www.avg.com/download-tools (http://www.avg.com/download-tools) there is a 32bit and 64 bit windows version, ensure you use the correct one.
Title: Re: Blue screen of death: aswSP.sys
Post by: Elle8 on May 29, 2011, 07:18:29 PM
Thanks David. I think it's removed now, as I did the removal tool thingie you suggested and then ran HiJack again and couldn't see it on the list.

I'd like to remove this one too, as it was from a former workplace:
 https://ssl01.berenberg.de/dana-cached/sc/JuniperSetupClient.cab

I know it's nothing to do with avast, but can you help me and tell me how to do it please?

Thank you.
Title: Re: Blue screen of death: aswSP.sys
Post by: Elle8 on May 29, 2011, 08:05:11 PM
 :-[ Just blue screened again with the same driver message mentioned above, so even though I've removed the AVG and AntiVir, it's still blue screening.

How depressing. :'(
Title: Re: Blue screen of death: aswSP.sys
Post by: Lisandro on May 29, 2011, 08:39:27 PM
:-[ Just blue screened again with the same driver message mentioned above, so even though I've removed the AVG and AntiVir, it's still blue screening.

How depressing. :'(
Did you try to uninstall them with specialized tools?
AVG Remover can be downloaded here: http://www.avg.com/download-tools
After you use Add/Remove, you should use Avira Antivir RegistryCleaner as well as the appropiate "Uninstallation Package", both of which can be found at: http://www.avira.com/en/support/support_downloads.html
Title: Re: Blue screen of death: aswSP.sys
Post by: Elle8 on May 29, 2011, 08:46:06 PM
Yes Tech, I did, as DavidR had sent these links to me earlier. I'm just waiting to hear back re my FTP download. The last error message I got still mentioned the aswSP.sys driver.

Thanks for your help!
Title: Re: Blue screen of death: aswSP.sys
Post by: Lisandro on May 29, 2011, 09:18:38 PM
Sorry Elle8, the thread is so long ;D
If you upload the dump, hope pk or vlk can have a look on it.
Title: Re: Blue screen of death: aswSP.sys
Post by: Elle8 on May 29, 2011, 09:26:06 PM
No worries. It's my fault for posting bits and pieces. I hope they look at it soon too. I uploaded it earlier today.

Thanks for your help!
Title: Re: Blue screen of death: aswSP.sys
Post by: DavidR on May 29, 2011, 09:26:23 PM
Thanks David. I think it's removed now, as I did the removal tool thingie you suggested and then ran HiJack again and couldn't see it on the list.

I'd like to remove this one too, as it was from a former workplace:
 https://ssl01.berenberg.de/dana-cached/sc/JuniperSetupClient.cab

I know it's nothing to do with avast, but can you help me and tell me how to do it please?

I don't know if there wouldn't be other elements to this O16 item, which is an ActiveX Object:
O16 - DPF: {F27237D7-93C8-44C2-AC6E-D6057B9A918F} (JuniperSetupClientControl Class) - hXXps://ssl01.berenberg.de/dana-cached/sc/JuniperSetupClient.cab

But you should be able to remove it using HJT, if it were ever needed again then it would have to be reloaded, see image.
Title: Re: Blue screen of death: aswSP.sys
Post by: Elle8 on May 29, 2011, 09:44:23 PM
It's being very stubborn and won't be removed ::).

Thank you David.
Title: Re: Blue screen of death: aswSP.sys
Post by: DavidR on May 29, 2011, 10:03:53 PM
What is the actual error that it is giving ?

Do you have Internet Explorer open when trying to delete it ?
If so close it.

Google is your friend, all you have to do is decide on what to search for, http://www.google.co.uk/search?q=remove+activeX+object (http://www.google.co.uk/search?q=remove+activeX+object), this being the first hit, http://support.microsoft.com/kb/154850 (http://support.microsoft.com/kb/154850).

Whilst this mentions very old IE versions and is almost a year old, it does give some general information. This one is more recent, http://support.microsoft.com/kb/240797 (http://support.microsoft.com/kb/240797) March this year.

Title: Re: Blue screen of death: aswSP.sys
Post by: Tango62 on May 30, 2011, 09:38:32 AM
i was working online and up popped up the avast logo with you need to update. So clicked on it and after that it said to restart and power down. So I did. Now it just boots up to blue screen of death. ???
Title: Re: Blue screen of death: aswSP.sys
Post by: Elle8 on May 30, 2011, 10:57:04 AM
Thanks David. I tried to remove with IE closed, but it still gave me the error message stating:

Error details:
An unexpected error has occurred at procedure:
modBackup_MakeBackup (sItem=016 - DPF:
{F27237D7-93C8-44C2-AC6E-D6057B9A918F}
(JuniperSetupClientControl Class) -
https://ssl01.berenberg.de/dana-cached/sc/JuniperSetupClient.cab
Error #75 - Path/File access error
Title: Re: Blue screen of death: aswSP.sys
Post by: SafeSurf on May 30, 2011, 11:08:00 AM
@ Tango62,

This thread has become so long and people are getting lost in here.  Please start a New Topic of your own and we will help you there.   You can cut and past your post and respond to my questions in your new thread there (see below).

Go to this link, http://forum.avast.com/index.php (http://forum.avast.com/index.php), scroll down to the Avast Free/Pro/Suite forum and click it, click the New Topic button at the top of the list and post there. 

In your next post, please add the following information:

1.   What version of Avast were you using and what did you upgrade to? 
2.   What product of Avast do you use?  Free, Pro, AIS?
3.   What other security software do you currently have or did you have in the past on this machine including:
- Antivirus (AV)
- Firewall (FW)
- Trial versions of AV, FW and other security programs
- Other security software (on-demand and resident)
- If they were in the past, how did you remove them (the vendor's uninstaller's tool or  another way)?
4.   Are your MS Updates (if you have Windows) current?
5.   What is your OS and SP version?

Thank you.
Title: Re: Blue screen of death: aswSP.sys
Post by: DavidR on May 30, 2011, 02:28:06 PM
Thanks David. I tried to remove with IE closed, but it still gave me the error message stating:

Error details:
An unexpected error has occurred at procedure:
modBackup_MakeBackup (sItem=016 - DPF:
{F27237D7-93C8-44C2-AC6E-D6057B9A918F}
(JuniperSetupClientControl Class) -
https://ssl01.berenberg.de/dana-cached/sc/JuniperSetupClient.cab
Error #75 - Path/File access error

The only thing that I can suggest are reading and trying to follow the two Microsoft KB articles or look in the google search link I gave and see if you can find an alternative solution in the other hits.

I was able to remove an old activeX O16 entry with HJT without problem and this one really shouldn't be any different.
Title: Re: Blue screen of death: aswSP.sys
Post by: Elle8 on May 30, 2011, 03:00:04 PM
Thanks David. It's probably me being moronic and not understanding the articles you sent me, cos they weren't written in words of one syllable!!!

Do you know if the other guys have read/received my FTP file please?

Thanks.
Title: Re: Blue screen of death: aswSP.sys
Post by: darkdevil1 on June 08, 2011, 09:18:26 PM
Sorry to semi-hijack but I thought I'd pop in and share my story.

I'm running W7 Ultimate x64 SP1 fully up to date and just uninstalled Microsoft Security Essentials. Windows firewall enabled, only other security program I have is Malwarebytes anti-malware. This is only the free version and does not include on-access protection.

I still have the dump files if it helps troubleshooting in any way.
Title: Re: Blue screen of death: aswSP.sys
Post by: DavidR on June 08, 2011, 10:16:35 PM
Thanks David. It's probably me being moronic and not understanding the articles you sent me, cos they weren't written in words of one syllable!!!

Do you know if the other guys have read/received my FTP file please?

Thanks.

You're welcome.

Unfortunately I wouldn't know if they have received the dump files which is why I suggest giving information that they can identify the person and topic it is related to.

Quote from: DavidR
Give the zip file you are uploading a unique name (e.g. Elle8-mem-dump.zip, etc), so they can identify it. It might not be a bad idea to create a text file (readme.txt) with any relevant information, avast topic, user name, etc. etc. in the zip file.